Pod2G

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 6 **Description** The issue concerns the System Logs implementation, which does not properly restrict access to /var/log by sandboxed apps. This allows remote attackers to obtain sensitive information by creating a crafted app that reads log files. **Recommendations** For versions prior to 6, update to a version 6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 6 **Description** The issue allows remote attackers to spoof text communication by using an SMS message's return address as the displayed sender address, even if the return address does not match the originating address. **Recommendations** For Apple iOS versions prior to 6, update to version 6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 6 **Description** The issue is caused by an off-by-one error in the Telephony component, allowing remote attackers to cause a denial of service, resulting in a buffer overflow and connectivity outage. This can be achieved via a crafted user-data header in an SMS message. **Recommendations** For versions prior to 6, update to version 6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 5.1 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a device crash. This is achieved by using a crafted catalog file in an HFS disk image, which exploits an integer underflow. **Recommendations** For versions prior to 5.1, update to version 5.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 5.1 **Description** A format string issue in the VPN component of Apple iOS allows remote attackers to execute arbitrary code via a crafted racoon configuration file. **Recommendations** For Apple iOS versions prior to 5.1, update to version 5.1 or later to resolve the issue.